package com.ruoyi.framework.web.service;

import com.ruoyi.common.utils.DateUtils;
import com.ruoyi.framework.listener.AuthenticationFailureListener;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;
import com.ruoyi.common.core.domain.entity.SysUser;
import com.ruoyi.common.core.domain.model.LoginUser;
import com.ruoyi.common.enums.UserStatus;
import com.ruoyi.common.exception.ServiceException;
import com.ruoyi.common.utils.StringUtils;
import com.ruoyi.system.service.ISysUserService;

import java.util.Date;
import java.util.Map;

/**
 * 用户验证处理
 *
 * @author ruoyi
 */
@Service
public class UserDetailsServiceImpl implements UserDetailsService
{
    private static final Logger log = LoggerFactory.getLogger(UserDetailsServiceImpl.class);

    @Autowired
    private ISysUserService userService;

    @Autowired
    private SysPermissionService permissionService;

    @Value("${ruoyi.validityTime}")
    private Integer validityTime;

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException
    {
        SysUser user = userService.selectUserByUserName(username);
        if (StringUtils.isNull(user))
        {
            log.info("登录用户：{} 不存在.", username);
            throw new ServiceException("登录用户：" + username + " 不存在");
        }
        else if (UserStatus.DELETED.getCode().equals(user.getDelFlag()))
        {
            log.info("登录用户：{} 已被删除.", username);
            throw new ServiceException("对不起，您的账号：" + username + " 已被删除");
        }
        else if (UserStatus.DISABLE.getCode().equals(user.getStatus()))
        {
            log.info("登录用户：{} 已被停用.", username);
            throw new ServiceException("对不起，您的账号：" + username + " 已停用");
        }else if(checkValidityTime(username)){
            log.info("登录用户：{} 密码输入多次错误,账号将被锁定{}分钟",username,validityTime);
            throw new ServiceException("密码输入多次错误,账号将被锁定"+validityTime+"分钟");
        }

        return createLoginUser(user);
    }

    /**
     * 验证 账号是否被锁定
     * @param username
     * @return
     */
    private boolean checkValidityTime(String username) {
        Map<String, Date> validityTime = AuthenticationFailureListener.validityTimeMap;
        if(validityTime.containsKey(username)){
            Date expirationTime = validityTime.get(username);
            // 如果过期时间与当前时间比较，大于0表示还没有到达锁定时间
            if(DateUtils.secondBetween(new Date(),expirationTime)>0){
                return true;
            }else{
                // 这里可以处理成账号输入多次错误后，锁定账号
                validityTime.remove(username);
            }

        }

        return false;
    }

    public UserDetails createLoginUser(SysUser user)
    {
        return new LoginUser(user.getUserId(), user.getDeptId(), user, permissionService.getMenuPermission(user));
    }
}
